July, 2018 - Lukas Vileikis

Bank-grade Security or Why Blocking Password Pasting is not a Good Security Strategy

July 27, 2018 Colors Passwords, Security

Your friend creates a website. You are curious and you ask him: “is it secure?”, which, in your mind, probably means “did you secure your

Carriage Return Line Feed (CRLF) Injection Explained

July 20, 2018 Colors Security

How does a server know when a new header begins and the old one ends or when a line is terminated? Simple. In order to note

2017 OWASP Top 10 for PHP Developers Part 10: Insufficient Logging & Monitoring

July 13, 2018 Colors OWASP, Security

Another day, another web application gets hacked. Most of the time web application hacks fly under the radar and are discovered years after the data breach

2017 OWASP Top 10 for PHP Developers Part 9: Using Components with Known Vulnerabilities

July 6, 2018 Colors OWASP, Security

Attacks on today’s web are an unsurprising reality – websites are hacked daily, data is being stolen and leaked left, right and centre. In many (though

2017 OWASP Top 10 for PHP Developers Part 8: Insecure Deserialization

July 2, 2018 Colors OWASP, Security

When developing a web application, web developers sometimes need to first turn data into a proper format so that it can be processed. Occasionally, converting